@rollup/rollup-linux-riscv64-gnu

Repo bus factorcaution

One contributor made about 94.8% of the 60 recent commits, creating a meaningful continuity risk. Organization backing and two additional active contributors partly compensate.

Repo package mentioncaution

The repository name does not match this platform-specific package and its README does not mention it, leaving some uncertainty about package-to-repository ownership. The mismatch is consistent with a monorepo subpackage but remains a transparency caution.

Workflow auditcaution

All seven workflows were analyzed, all 64 action references are pinned, and no untrusted checkout or script-injection path was found. High-severity cache-poisoning results were low confidence, while high-confidence adhoc package findings are limited hygiene concerns.